$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: NRN1FVOdgVC7oXpGxkEwc6WKaj8a9pbLb7ZhYihDKbM= Subject key identifier: 9A:89:2A:C8:55:2D:3D:9F:05:44:F1:91:C4:51:FE:F4:22:A7:50:90 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019D273ABA87DC171E75962949440135D534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 18AC Signing time: Wed 25 Mar 2026 23:00:53 +0000 Manifest this update: Wed 25 Mar 2026 23:00:53 +0000 Manifest next update: Thu 26 Mar 2026 23:00:53 +0000 Files and hashes: 1: EcU0CNE-IiMWy4rJBEYnRcLjWlg.roa (hash: huHb9cQ28qENRbxt4Jo9X2c4RoM7avLuE+mizVHLkVc=) 2: FFAXFP5ez3X5u3h1IVAvcRBfHk4.roa (hash: OODOGsmCz6Qm7uE5z8GW3j0W0K6FvMl33OoYR/8rp0M=) 3: Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa (hash: Y7e1WnGcVWNvFMUYbkyeqz5FloZW76Eh6KqSDa6fAQI=) 4: IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa (hash: H55puMmQB5OWgkG+g+z4d3V7omo2rQK1VzH3hQXYY3o=) 5: O69azZLJgNqAunz5z_lWfvgC56o.roa (hash: y+mBalpZhDFTPhkJAkGyUyBVLw40n3SmTyy9Fbh3dKI=) 6: PSaX76hLXCC3HwZfR6n8D2sk5yo.roa (hash: /hW3Ol8jGkzLopkuNwrc+rk1t6CwIFcpRCLkUh52Nz0=) 7: Ql1YFiUReCktjzOXgcJSrBSI6No.roa (hash: USou/kCPcPW7NF+NsAzNyLXe0GEfMruJyzGdt4jQ4H8=) 8: WoJUK_VlF2x2Y6RewR1W0jcXELM.roa (hash: 49/N0yckcfgw+Jpt1B3ZylVpCRtLmR+tToTlhzbYrNM=) 9: cLJsj5GbZFPDLqBTAGoEw4keZjc.roa (hash: ONjTw1gt4vqkoZ/+zv3GVV+vpr1bahhrBgTFsZguWy0=) 10: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: b+8a0yivW9VPqNsoRNbyS5DwImxkkGV7MoPJ1nsyTHk=) 11: srs-2gJxDmgBkFBU7WzheGqpBy4.roa (hash: M8sahyn+CGhviykxLGO4OXGDUGLt5W/3MG5YlWrxi28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3a:ba:87:dc:17:1e:75:96:29:49:44:01:35:d5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Mar 25 23:00:53 2026 GMT Not After : Mar 26 23:00:53 2026 GMT Subject: CN=9a892ac8552d3d9f0544f191c451fef422a75090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:21:89:a2:41:35:fa:65:11:04:2f:5f:61: 3a:e9:83:2f:a2:f3:c7:c2:dd:43:ff:77:7b:53:95: 99:94:04:ce:f4:c4:9d:93:9e:34:db:4a:03:ac:fb: 95:7e:79:a7:be:39:0d:aa:ab:40:71:83:88:b7:1d: 44:14:7b:bb:9c:c6:99:03:80:fa:b1:a8:cf:64:53: 96:6e:29:cd:e4:b5:28:5e:34:f1:6c:6c:30:9f:00: a9:3d:87:3e:4d:2c:b8:83:f7:5c:12:08:d5:c8:9c: 6e:67:f1:3b:ee:2e:f4:7c:2c:de:53:35:92:2f:a4: 55:55:17:a7:d0:7a:40:b3:a1:e0:bd:9c:c4:bf:2f: c0:60:1f:39:41:31:3f:79:eb:e8:26:8c:3a:00:47: b1:ea:5d:73:39:94:b3:d1:e1:4c:95:52:74:28:ac: da:80:2b:77:bc:9e:6f:37:b8:84:39:c0:3a:17:23: f2:38:6a:f4:8d:67:d8:01:c5:39:2d:3a:5c:12:99: 58:bb:b7:04:20:f7:cb:13:71:b5:92:62:7e:6a:76: d2:76:77:d2:d9:ee:4d:3e:fc:fa:ea:b6:59:c9:34: 08:20:d1:63:35:1f:34:85:0f:29:e6:04:24:ac:7d: 7a:57:4e:dd:03:de:0d:1e:61:d0:b3:52:3c:d4:b6: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:89:2A:C8:55:2D:3D:9F:05:44:F1:91:C4:51:FE:F4:22:A7:50:90 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7a:40:1f:ca:20:e9:75:c2:e8:b0:c8:51:c9:27:6c:2e:c3: 77:88:ef:66:ea:f5:75:b0:ea:82:b1:33:c3:39:37:a0:b1:bf: fa:18:52:cb:5f:21:e7:42:22:ed:28:07:6a:a8:a0:58:4d:43: e8:27:c8:56:3f:62:64:34:53:eb:8e:d3:79:95:a9:21:01:5f: a2:99:b8:a1:30:e0:94:33:14:dc:f5:25:28:9a:e2:0f:fc:ff: ab:96:93:be:e0:7e:74:b1:45:73:bb:df:fc:7b:10:c3:be:58: c2:a6:c3:bd:eb:b0:80:fb:2f:2e:d3:47:44:13:5d:f3:c4:c2: fc:23:88:fa:09:ab:69:b1:20:ba:67:83:38:cd:64:5a:eb:02: 9f:4d:dd:64:f3:61:d2:1c:96:af:dc:a5:04:36:39:b1:85:7d: 6c:e1:9f:4a:04:bc:6a:74:4b:6d:83:02:f9:51:f7:c2:9c:3c: f1:5d:ad:6e:91:f3:0f:77:89:29:27:cc:66:f0:60:d3:48:07: db:ea:73:6d:f1:d0:35:74:80:f0:9d:5d:4b:63:3c:f2:f0:fa: 46:12:31:ea:87:25:10:4e:db:4b:c3:9b:0a:69:60:63:69:40: b5:04:a6:7c:df:aa:58:87:c7:c7:82:e1:f1:a3:e1:6f:2a:c0: ba:f5:27:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOrqH3BcedZYpSUQBNdU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwMzI1MjMwMDUzWhcNMjYwMzI2MjMwMDUzWjAzMTEwLwYDVQQD Eyg5YTg5MmFjODU1MmQzZDlmMDU0NGYxOTFjNDUxZmVmNDIyYTc1MDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZQhiaJBNfplEQQvX2E66YMvovPH wt1D/3d7U5WZlATO9MSdk54020oDrPuVfnmnvjkNqqtAcYOItx1EFHu7nMaZA4D6 sajPZFOWbinN5LUoXjTxbGwwnwCpPYc+TSy4g/dcEgjVyJxuZ/E77i70fCzeUzWS L6RVVRen0HpAs6HgvZzEvy/AYB85QTE/eevoJow6AEex6l1zOZSz0eFMlVJ0KKza gCt3vJ5vN7iEOcA6FyPyOGr0jWfYAcU5LTpcEplYu7cEIPfLE3G1kmJ+anbSdnfS 2e5NPvz66rZZyTQIINFjNR80hQ8p5gQkrH16V07dA94NHmHQs1I81LYYlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqJKshVLT2fBUTxkcRR/vQip1CQMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHpAH8og 6XXC6LDIUcknbC7Dd4jvZur1dbDqgrEzwzk3oLG/+hhSy18h50Ii7SgHaqigWE1D 6CfIVj9iZDRT647TeZWpIQFfopm4oTDglDMU3PUlKJriD/z/q5aTvuB+dLFFc7vf /HsQw75YwqbDveuwgPsvLtNHRBNd88TC/COI+gmrabEgumeDOM1kWusCn03dZPNh 0hyWr9ylBDY5sYV9bOGfSgS8anRLbYMC+VH3wpw88V2tbpHzD3eJKSfMZvBg00gH 2+pzbfHQNXSA8J1dS2M88vD6RhIx6oclEE7bS8ObCmlgY2lAtQSmfN+qWIfHx4Lh 8aPhbyrAuvUn3w== -----END CERTIFICATE-----Generated at Thu Mar 26 08:26:49 2026 by rpki-client